Privacy policy.

This Privacy Policy explains how Anıl Reyhanoğulları ve Bünyamin Reyhanoğulları Adi Ortaklığı (“Koordinat Coffee Factory”, “we”) processes, stores and protects your personal data when you use the koordinatcoffee.com website (the “Site”) and the Koordinat Coffee mobile application (the “App”), in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and related legislation. We are the data controller under KVKK.

Website

The Site is for information only; it has no accounts, forms or payments. No cookies, analytics or advertising trackers are used. Our hosting provider may keep standard server logs — such as IP address, browser information and time of access — for a short period for security and to keep the service running.

Mobile app

• Account details: first name, last name, e-mail address; optionally date of birth, gender and phone number.
• Order details: items ordered, amount, date and time, order status and handover details.
• Payment details: payment transaction number, amount, result (successful/failed) and refund records. We never see or store your card number, expiry date or CVV; these are processed only by the payment institution PayTR.
• Loyalty data: your coffee purchase records, stamp and reward counters and QR scans, so the Papağan loyalty card can work.
• Fortune & entertainment data: the reading type you choose, the relationship status and topic you optionally enter, the generated readings; points, levels, game scores and invite code use.
• User content: reviews and comments you share.
• Technical data: session and authentication data, device push token, in-app interaction records and error logs.

Photos you take or choose from your gallery for coffee-cup or palm readings are not sent anywhere; they are not uploaded to our servers or any third party and are not stored. The reading is generated automatically by artificial intelligence from limited text information, without the photo content, and is for entertainment only.

We use your data to create and manage your account; to take, prepare and hand over your orders; to process payments and refunds; to issue financial documents; to run the loyalty programme; to produce the entertainment content you ask for; to keep the service secure and prevent fraud; to improve service quality; to send notifications; and to meet our legal obligations. For legal grounds and details, see the KVKK Privacy Notice.

Your personal data is never sold, rented or shared with third parties for marketing. It is shared only as far as necessary to provide the service, with:

• PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. and banks (payment, 3D Secure verification, refunds and fraud prevention);
• cloud database and server infrastructure providers;
• an artificial-intelligence service provider (limited text information for readings only);
• push notification infrastructure (device push token);
• authentication providers (if you choose to sign in with Google or Apple);
• our accountant and competent public authorities (under tax law and other legal obligations).

Some infrastructure providers may have servers abroad. Transfers abroad are made on the basis of the safeguards in Article 9 of KVKK and/or your explicit consent.

Account data is kept while your account is active. You can delete your account at any time in the App settings. Order, payment and financial records are kept for 10 years as required by the Tax Procedure Law No. 213 and the Turkish Commercial Code No. 6102; these records are retained with restricted access for the legal period even after your account is deleted. Other data is deleted, destroyed or anonymised when the purpose of processing ends.

Your data is encrypted in transit with SSL/TLS. On the server side we apply administrative and technical measures including access control, authorisation, row-level access rules and logging. Payments are processed on PayTR’s PCI-DSS compliant infrastructure.

To exercise your rights under Article 11 of KVKK (to request information, correction, deletion, to object, etc.), write to coffeekoordinat@gmail.com or to Çiğdede Mah. Mehmet Aslan Cad. No: 201 D: 1, 31800 Samandağ / Hatay. Requests are answered free of charge within 30 days at the latest.

The App is not intended for people under 18, and we do not knowingly collect personal data from this age group.

This policy may be updated. The current version takes effect when it is published on this page; we will let you know in the App about significant changes.

Anıl Reyhanoğulları ve Bünyamin Reyhanoğulları Adi Ortaklığı — Çiğdede Mah. Mehmet Aslan Cad. No: 201 D: 1, 31800 Samandağ / Hatay — coffeekoordinat@gmail.com